INNER CODE UNIT · Python

censys

montysecurity/C2-Tracker · tracker.py:300

def censys():
    # This function is disabled until I get new queries after Censys changed their search syntax
    queries = {
        "RisePro Stealer": [
            "services.http.response.headers: (key: `Server` and value.headers: `RisePro`)",
            "services.software.product:RisePro"
        ],
        #"Viper C2": [
        #    "services.software.product=`VIPER`"
        #],
        #"Poseidon C2": [
        #    "services.http.response.html_title=`POSEIDON`"
        #],
        "Scarab Botnet": [
            "services.software.product=`Scarab`"
        ],
        "Cobalt Strike C2": [
            "services.software.product=`Cobalt Strike`"

View source record →